2 ms·

There are only a few tools listed here, with short text-only descriptions. Based on those descriptions, I can tell that most of these tools are of no interest t

There are only a few tools listed here, with short text-only descriptions. Based on those descriptions, I can tell that most of these tools are of no interest to me. I don't see any tutorials, videos, examples, or use cases outlined here. I like the style of the website and how clean it looks. However, I'm left wanting to be convinced that there is anything here beyond a very short shell script that calls out to a few tools like nmap, and nothing more. Please feel free to provide convincing evidence that there is something worthwhile on this page. I do honestly want to like it.

bradknowles 10y ago
As far as the tools I like to use for security testing, you could start with the list from Sectools.org. Put a significant number of them in a web-based service wrapper, and I might be convinced to use that as my first stop on the road to more complete testing.
- _pdp_ 10y ago
  Wrapping existing tools is not a problem but you are getting nothing more than a wrapper. Hell, you can even run a web-based terminal and stick them in your own DO host for $5 a month. However, a lot of the security tools are side-projects so do not expect them to work all the time. Distributions like Kali make it a lot easier but even then getting started may be hard and besides you need to run them either on your own box or a server and convince other people to use them too if you are to share the burden of doing security tests. The secapps tools are designed to be a click away - always available with no installation or additional fiddling. Naturally we started with web tools but we are currently expanding into other areas too and in the future we have some cool ideas how to bring some powerful capabilities at your fingertips. But yes, down the line, we would like to offer a hosted access of open source tools too.
_pdp_ 10y ago
One of the biggest challenges that we face (and perhaps as you suggested this can be resolved with a video) is that these are not wrappers of existing tools. The value is very different. These tools run on top of the browser using client-side technologies only - i.e. JavaScript, HTML, WebSocket, etc. There is no reliance on servers and as such they are closer to desktop apps but we use the web as a delivery mechanism. It is very difficult to explain this normally and many people are getting confused.

bradknowles 10y ago

As far as the tools I like to use for security testing, you could start with the list from Sectools.org. Put a significant number of them in a web-based service wrapper, and I might be convinced to use that as my first stop on the road to more complete testing.

_pdp_ 10y ago
Wrapping existing tools is not a problem but you are getting nothing more than a wrapper. Hell, you can even run a web-based terminal and stick them in your own DO host for $5 a month. However, a lot of the security tools are side-projects so do not expect them to work all the time. Distributions like Kali make it a lot easier but even then getting started may be hard and besides you need to run them either on your own box or a server and convince other people to use them too if you are to share the burden of doing security tests. The secapps tools are designed to be a click away - always available with no installation or additional fiddling. Naturally we started with web tools but we are currently expanding into other areas too and in the future we have some cool ideas how to bring some powerful capabilities at your fingertips. But yes, down the line, we would like to offer a hosted access of open source tools too.

_pdp_ 10y ago

One of the biggest challenges that we face (and perhaps as you suggested this can be resolved with a video) is that these are not wrappers of existing tools. The value is very different. These tools run on top of the browser using client-side technologies only - i.e. JavaScript, HTML, WebSocket, etc. There is no reliance on servers and as such they are closer to desktop apps but we use the web as a delivery mechanism. It is very difficult to explain this normally and many people are getting confused.